Fluoroacetate

The issue is related to errors in handling objects in memory within the Windows Graphics Component. This can be exploited by an attacker to potentially elevate their privileges or execute arbitrary code using a specially crafted application. An elevation-of-privilege vulnerability allows attackers to affect the system.

An issue was discovered in the export component of GetApps, which mishandles the functionality of opening other components. Attackers can induce users to open specific web pages in a specific network environment, leading to information leakage. This occurs when the WebView component of Messaging is loaded with malicious web pages.

This issue allows remote attackers to execute arbitrary code on affected devices. The exploitation requires user interaction, specifically answering a phone call. The flaw exists within the Call Control Setup messages due to the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this to execute code in the context of the baseband processor.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue is related to an elevation of privilege vulnerability in the Windows kernel, which fails to properly handle objects in memory. This can be exploited by an attacker to execute arbitrary code in kernel mode using a specially crafted application. The vulnerability is associated with insufficient access control in the Windows kernel.

The issue is related to an elevation of privilege vulnerability that exists when the Windows kernel fails to properly handle objects in memory. This can allow an attacker to execute arbitrary code and gain control over the vulnerable system. The vulnerability is associated with errors in processing objects in memory in the Windows kernel's DirectComposition component.

The issue is caused by multiple memory corruption problems and an integer overflow, which may lead to arbitrary code execution when processing maliciously crafted web content. This allows a remote attacker to execute arbitrary code.

The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the `WebAssembly.Instance` method, resulting from the lack of proper validation of user-supplied data. This can lead to a write past the end of a heap-based buffer, allowing an attacker to execute code in the context of the current process.

The issue is related to an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI. Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This may allow a guest to execute code on the host.

The issue is related to a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI. This vulnerability may allow a guest to execute code on the host. Exploitation requires an attacker to have access to a virtual machine with a virtual USB controller present. The vulnerability is also described as a race condition, which may allow an attacker to execute arbitrary code using the virtual USB controller.

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the ASN.1 parser, which does not properly validate the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this to execute code in the context of the current process.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing them to execute arbitrary code.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing for remote code execution.

The issue involves an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to elevate privileges. This is related to a privilege escalation vulnerability in the mediaserverd component.

The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to elevate privileges. This is a privilege escalation vulnerability.

The issue is related to an integer overflow when computing the required allocation size for a new JavaScript object in V8. This could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability may enable a remote attacker to execute arbitrary code.

The issue is related to incorrect handling of complex species in V8, allowing a remote attacker to execute arbitrary code via a crafted HTML page. This is due to a buffer overflow in the V8 JavaScript engine. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.